{"investigation":{"slug":"kyberswap-classic","entity_name":"KyberSwap Classic","trust_score":28,"severity_base":null,"score_modifier":0,"confidence":0.88,"status":"published","content_type":"investigation","summary":"KyberSwap is a decentralized exchange (DEX) and liquidity protocol operated by Kyber Network. In November 2023, KyberSwap Elastic — the protocol's concentrated liquidity layer — suffered one of the largest DEX exploits of the year, with approximately $48.9 million drained across thirteen chains via a sophisticated tick-manipulation and rounding-error attack. The alleged attacker, Canadian national Andean Medjedovic, was subsequently indicted by U.S. federal prosecutors on five felony counts and remains a fugitive as of mid-2026.","sections":[{"content":"KyberSwap is a multi-chain DEX aggregator and liquidity protocol developed by Kyber Network, a Singapore-based blockchain company founded in 2017. The protocol operates two distinct liquidity products: KyberSwap Classic, which implements a traditional AMM model providing liquidity across the full price range with a dynamic fee mechanism; and KyberSwap Elastic, which introduced concentrated liquidity in December 2021, allowing liquidity providers to supply assets within custom price ranges similar to Uniswap v3. KyberSwap Elastic also features an automatic fee reinvestment mechanism via a dedicated reinvestment curve, which proved to be the vector through which the November 2023 exploit was executed. The KNC (Kyber Network Crystal) token is used for governance through KyberDAO.","heading":"Protocol Overview","sources":[{"url":"https://docs.kyberswap.com/","name":"Introduction to KyberSwap — KyberSwap Docs","type":"official","credibility":1},{"url":"https://support.kyberswap.com/hc/en-us/articles/13766696328729-What-is-the-Difference-Between-KyberSwap-Classic-and-KyberSwap-Elastic","name":"What is the Difference Between KyberSwap Classic and KyberSwap Elastic? — KyberSwap Help Center","type":"official","credibility":1},{"url":"https://blog.kyberswap.com/announcing-our-new-kyberswap-protocol-kyberswap-elastic/","name":"Announcing Our New KyberSwap Protocol — KyberSwap Elastic — KyberSwap Blog","type":"official","credibility":1}],"severity":"low"},{"content":"On November 22, 2023, the KyberSwap Elastic concentrated liquidity pools were exploited via a highly precise smart contract attack, resulting in the unauthorized extraction of approximately $48.7 million by the primary exploiter and an additional $6.6 million by front-running MEV bots that mimicked the attack. The vulnerability resided in the protocol's tick-based swap mechanism, specifically in the computeSwapStep() function. A double rounding error allowed the computed result price to exceed the target price in edge cases, causing the protocol to skip a necessary liquidity update while still advancing the tick state. The attacker exploited this by first manipulating the pool price outside the active liquidity zone, then adding and partially removing liquidity to achieve a specific internal state, and finally executing a precisely calculated swap — using an amount of 244,080,034,447,359,999,999 units — that triggered the rounding flaw. This corrupted the pool's liquidity accounting, causing it to believe far more liquidity was available than actually existed. A reverse swap then extracted the inflated balance. The attack was executed across thirteen chains including Arbitrum, Optimism, Ethereum, Polygon, BNB Chain, Avalanche, Fantom, Base, Scroll, Linea, Polygon zkEVM, BitTorrent, and Cronos. Total user assets affected, including liquidity positions and LP fees across 2,367 impacted addresses, were valued at approximately $56.2 million, of which $48.7 million was taken by the primary exploiter.","heading":"November 2023 Exploit — Technical Analysis","sources":[{"url":"https://blog.kyberswap.com/post-mortem-kyberswap-elastic-exploit/","name":"Post Mortem: KyberSwap Elastic Exploit November 2023 — KyberSwap Blog","type":"official","credibility":1},{"url":"https://hacken.io/insights/kyberswap-hack-explained/","name":"KyberSwap's $47M Reentrancy Attack: A Deep Dive into the Exploit — Hacken","type":"research","credibility":2},{"url":"https://www.halborn.com/blog/post/explained-the-kyberswap-hack-november-2023","name":"Explained: The KyberSwap Hack (November 2023) — Halborn","type":"research","credibility":2},{"url":"https://blocksec.com/blog/yet-another-tragedy-of-precision-loss-an-in-depth-analysis-of-the-kyber-swap-incident-1","name":"Yet Another Tragedy of Precision Loss: An In-Depth Analysis of the KyberSwap Incident — BlockSec","type":"research","credibility":2},{"url":"https://www.coindesk.com/tech/2023/11/23/kyberswap-dex-hacked-for-48-million-attacker-teases-negotiations","name":"KyberSwap DEX Hacked for $48 Million, Attacker Teases Negotiations — CoinDesk","type":"news_article","credibility":1}],"severity":"critical"},{"content":"On November 30, 2023, the attacker — signing as 'Kyber Director' — published an on-chain message via an Ethereum transaction setting out sweeping demands in exchange for returning 50% of the stolen assets. The demands included: complete executive control of Kyber Network; full authority over the KyberDAO governance body; access to all internal company documentation including financials, salaries, investor records, and liabilities; and forfeiture of all company assets including tokens, equity shares, and intellectual property. The attacker stated that existing employees would have their salaries doubled and offered a 12-month severance package to those unwilling to remain, framing the ultimatum as a 'treaty' with a deadline of December 10, 2023, after which the offer would lapse. No formal acceptance was reported from Kyber Network's leadership. U.S. federal prosecutors subsequently characterized this as an attempted Hobbs Act extortion — one of five felony charges included in the 2025 indictment of Andean Medjedovic.","heading":"Attacker Demands and Extortion","sources":[{"url":"https://decrypt.co/208147/kyberswap-hacker-demands-company-control-unhinged-on-chain-ransom-letter","name":"KyberSwap Hacker Demands Company Control in Unhinged On-Chain Ransom Letter — Decrypt","type":"news_article","credibility":2},{"url":"https://www.theblock.co/post/265429/kyber-hacker-control-message","name":"KyberSwap hacker demands full control in bizarre on-chain message — The Block","type":"news_article","credibility":2},{"url":"https://cointelegraph.com/news/kyberswap-hacker-demands-complete-control-over-kyber-company","name":"KyberSwap hacker demands complete control over Kyber company — CoinTelegraph","type":"news_article","credibility":2},{"url":"https://www.justice.gov/opa/pr/canadian-man-charged-65m-cryptocurrency-hacking-schemes","name":"Canadian Man Charged in $65M Cryptocurrency Hacking Schemes — U.S. Department of Justice","type":"regulatory","credibility":1}],"severity":"critical"},{"content":"In February 2025, the U.S. Department of Justice unsealed a five-count criminal indictment in the Eastern District of New York charging Andean 'Andy' Medjedovic, 22, a Canadian national, with the KyberSwap exploit as well as a 2021 exploit of the Indexed Finance DeFi protocol. According to the indictment, Medjedovic borrowed hundreds of millions of dollars in digital tokens to execute deceptive trades that caused the protocols' smart contracts to falsely calculate key variables, enabling him to withdraw investor funds at artificial prices. The charges include wire fraud, unauthorized damage to a protected computer, attempted Hobbs Act extortion, money laundering conspiracy, and money laundering, carrying a maximum combined sentence of 90 years in prison. Prosecutors allege that Medjedovic laundered the proceeds through swap transactions, cross-chain bridge transfers, and cryptocurrency mixers. Medjedovic allegedly admitted to orchestrating the 2021 Indexed Finance hack as a teenager in prior communications, and reportedly claimed in 2023 to be traveling through Europe, South America, and an unnamed island nation while evading law enforcement. He was arrested in Belgrade, Serbia in September 2024 but was released after 105 days when the High Court of Belgrade ruled that Dutch prosecutors had not sufficiently established his identity as the perpetrator and that the domestic sentencing equivalent was insufficient to justify extradition. As of early 2026, Medjedovic remained at large and was believed by the DOJ to be in Bosnia. Reports from March 2026 indicate he had retained a U.S. lobbying firm, paying approximately $300,000, to pursue a presidential pardon.","heading":"Alleged Attacker Identification and DOJ Indictment","sources":[{"url":"https://www.justice.gov/opa/pr/canadian-man-charged-65m-cryptocurrency-hacking-schemes","name":"Canadian Man Charged in $65M Cryptocurrency Hacking Schemes — U.S. Department of Justice","type":"regulatory","credibility":1},{"url":"https://www.coindesk.com/policy/2025/02/03/u-s-prosecutors-charge-canadian-man-with-usd65m-hacks-of-indexed-finance-kyberswap","name":"U.S. Prosecutors Charge Canadian Man With $65M Hacks of Indexed Finance, KyberSwap — CoinDesk","type":"news_article","credibility":1},{"url":"https://cointelegraph.com/news/andean-medjedovic-kyberswap-alleged-hacker","name":"Who is Andean Medjedovic, the alleged $48M KyberSwap hacker? — CoinTelegraph","type":"news_article","credibility":2},{"url":"https://www.cbc.ca/news/world/canadian-alleged-cryptocurrency-hack-9.7066147","name":"Fake passports, $65M US and an Interpol Red Notice: Canadian crypto fugitive vanishes after arrest in Serbia — CBC News","type":"news_article","credibility":1},{"url":"https://balkaninsight.com/2026/03/24/fugitive-canadian-hacker-released-by-serbia-seeks-pardon-from-trump/bi/","name":"Fugitive Canadian Hacker, Released by Serbia, Seeks Pardon from Trump — Balkan Insight","type":"news_article","credibility":2}],"severity":"critical"},{"content":"Prior to the November 2023 exploit, KyberSwap Elastic had undergone multiple security reviews. ChainSecurity performed audits following the protocol's initial December 2021 launch and again after significant security enhancements deployed in May 2023, when Kyber hardened the contracts following an earlier vulnerability disclosure. All findings from the May 2023 ChainSecurity audit were resolved, with one low-severity issue (DOMAIN_SEPARATOR not being recomputed if chainId changes) accepted as a known risk. In September 2023 — approximately two months before the exploit — an open audit contest hosted on Sherlock involved 207 community participants and completed without identifying the tick-rounding vulnerability. The exploit therefore succeeded despite a recently completed multi-party security review, highlighting the difficulty of detecting precision-loss vulnerabilities in complex AMM arithmetic. KyberSwap had also suffered a separate frontend exploit in September 2022 in which a malicious script was injected via a compromised third-party dependency, though that incident did not affect smart contract funds.","heading":"Pre-Exploit Audit History and Security Posture","sources":[{"url":"https://docs.kyberswap.com/reference/legacy/audits","name":"Audits — KyberSwap Docs","type":"official","credibility":1},{"url":"https://www.chainsecurity.com/security-audit/kyberswap-elastic","name":"KyberSwap Elastic — ChainSecurity Smart Contract Audit","type":"research","credibility":2},{"url":"https://github.com/sherlock-audit/2023-07-kyber-swap","name":"Sherlock Audit Contest — kyber-swap (July 2023)","type":"research","credibility":2},{"url":"https://blog.kyberswap.com/post-mortem-past-kyberswap-frontend-exploit-sept-2022/","name":"Post Mortem: Past KyberSwap Frontend Exploit (Sept 2022) — KyberSwap Blog","type":"official","credibility":1}],"severity":"high"},{"content":"KyberSwap suspended liquidity additions across all chains within minutes of detecting the exploit on November 22, 2023. On December 1, 2023, Kyber Network announced a Treasury Grant Program to compensate the 2,367 affected liquidity providers. Eligible users were offered three options: Option A provided 60% of the affected asset's reference value vested over three months in USD stablecoins; Option B provided 100% of reference value vested over twelve months in stablecoins; Option C allowed users to opt out entirely. The Treasury Grant UI launched on January 19, 2024, with vesting commencing February 1, 2024. Separately, the owners of two MEV front-run bots that had extracted approximately $6.6 million from the affected pools voluntarily returned approximately $5.17 million of those assets. Kyber Network also partnered with Arkham Intelligence on a bounty program to assist in identifying the primary exploiter. Following the exploit, Kyber Network reduced its workforce by approximately 50% and temporarily suspended the KyberAI project and ongoing liquidity protocol initiatives. The protocol subsequently relaunched with additional security measures and the backing of a KyberDAO-administered security fund.","heading":"Team Response and Compensation Program","sources":[{"url":"https://blog.kyberswap.com/kyberswap-treasury-grant-program/","name":"KyberSwap Treasury Grant Program for Affected Users — KyberSwap Blog","type":"official","credibility":1},{"url":"https://blog.kyberswap.com/kyberswap-elastic-exploit-treasury-grant-program-registration/","name":"Treasury Grant Program Registration for Affected Users — KyberSwap Blog","type":"official","credibility":1},{"url":"https://cointelegraph.com/news/kyberswap-announces-treasury-grants-for-hack-victims","name":"KyberSwap announces treasury grants for hack victims — CoinTelegraph","type":"news_article","credibility":2},{"url":"https://crypto.news/kyberswap-laid-off-50-of-workforce-after-54m-elastic-exploit/","name":"KyberSwap laid off 50% of workforce after $54m Elastic exploit — crypto.news","type":"news_article","credibility":2},{"url":"https://beincrypto.com/kyberswap-resumes-elastic-protocol-backed-by-kyberdao-security-fund/","name":"KyberSwap Resumes Elastic Protocol, Backed By KyberDAO Security Fund — BeInCrypto","type":"news_article","credibility":2}],"severity":"high"},{"content":"Blockchain investigator ZachXBT tracked portions of the stolen funds from the KyberSwap exploit, tracing approximately $40,000 to two specific wallet addresses in the immediate aftermath of the attack. ZachXBT's monitoring of the attacker's wallet activity continued into 2026; in January 2026, reporting indicated that a wallet cluster associated with the broader investigation contained 744,213 KNC tokens valued at approximately $158,000, though the precise connection between these holdings and Medjedovic's wallets requires independent verification. The Nominis on-chain intelligence platform separately published analysis linking the primary exploiter's wallet activity and behavioral patterns. The hack was also documented by multiple blockchain security firms including SlowMist, BlockSec, Hacken, Halborn, and QuillAudits, each of whom provided independent on-chain reconstructions of the attack flow corroborating the rounding-error mechanism described in Kyber's official post-mortem.","heading":"On-Chain Investigator Coverage","sources":[{"url":"https://www.nominis.io/insights/kyberswap-hacker-uncovered","name":"KyberSwap Hacker Uncovered: Attack Analysis — Nominis Insights","type":"on_chain","credibility":2},{"url":"https://slowmist.medium.com/a-deep-dive-into-the-kyberswap-hack-3e13f3805d3a","name":"A Deep Dive Into the KyberSwap Hack — SlowMist (Medium)","type":"research","credibility":2},{"url":"https://blocksec.com/blog/top-ten-awesome-security-incidents-in-2023","name":"Top Ten Security Incidents in 2023 — BlockSec","type":"research","credibility":2}],"severity":"high"}],"timeline":[{"date":"2021-12","event":"KyberSwap Elastic (concentrated liquidity protocol) launched.","source":"KyberSwap Blog","source_url":"https://blog.kyberswap.com/announcing-our-new-kyberswap-protocol-kyberswap-elastic/","date_original":"2021-12-01"},{"date":"2022-09","event":"KyberSwap frontend exploit detected — a malicious script injected via a compromised third-party dependency redirected user approvals. No smart contract funds were drained.","source":"KyberSwap Blog","source_url":"https://blog.kyberswap.com/post-mortem-past-kyberswap-frontend-exploit-sept-2022/","date_original":"2022-09-01"},{"date":"2023-05-16","event":"KyberSwap Elastic smart contracts redeployed after hardening; ChainSecurity completes final audit finding all issues resolved except one accepted low-severity item.","source":"KyberSwap Docs","source_url":"https://docs.kyberswap.com/reference/legacy/audits"},{"date":"2023-09","event":"Sherlock community audit contest involving 207 participants concludes. The tick-rounding vulnerability is not identified.","source":"Sherlock GitHub","source_url":"https://github.com/sherlock-audit/2023-07-kyber-swap","date_original":"2023-09-01"},{"date":"2023-11-22","event":"KyberSwap Elastic exploited across 13 chains. Approximately $48.7 million taken by the primary exploiter; an additional $6.6 million extracted by front-running MEV bots. KyberSwap suspends liquidity additions across all chains within minutes.","source":"KyberSwap Blog Post-Mortem","source_url":"https://blog.kyberswap.com/post-mortem-kyberswap-elastic-exploit/"},{"date":"2023-11-23","event":"CoinDesk reports the exploit publicly. Total value locked drops from approximately $86 million to $7.17 million — a roughly 90% decline.","source":"CoinDesk","source_url":"https://www.coindesk.com/tech/2023/11/23/kyberswap-dex-hacked-for-48-million-attacker-teases-negotiations"},{"date":"2023-11-30","event":"Attacker publishes on-chain message signed as 'Kyber Director' demanding full executive and governance control of Kyber Network, access to all internal documents and assets, and setting a December 10, 2023 deadline for acceptance.","source":"Decrypt","source_url":"https://decrypt.co/208147/kyberswap-hacker-demands-company-control-unhinged-on-chain-ransom-letter"},{"date":"2023-12","event":"Kyber Network announces Treasury Grant Program to compensate affected users up to the reference value of lost funds.","source":"KyberSwap Blog","source_url":"https://blog.kyberswap.com/kyberswap-treasury-grant-program/","date_original":"2023-12-01"},{"date":"2023-12-10","event":"Attacker's self-imposed deadline for KyberSwap to accept demands passes with no public acceptance from Kyber Network.","source":"Decrypt","source_url":"https://decrypt.co/208147/kyberswap-hacker-demands-company-control-unhinged-on-chain-ransom-letter"},{"date":"2024","event":"Kyber Network lays off approximately 50% of its workforce and pauses KyberAI and certain liquidity protocol initiatives following post-exploit financial stress.","source":"crypto.news","source_url":"https://crypto.news/kyberswap-laid-off-50-of-workforce-after-54m-elastic-exploit/","date_original":"2024-01-01"},{"date":"2024-01-19","event":"Treasury Grant Program UI goes live. MEV bot operators voluntarily return approximately $5.17 million of front-run assets.","source":"KyberSwap Blog","source_url":"https://blog.kyberswap.com/kyberswap-elastic-exploit-treasury-grant-program-registration/"},{"date":"2024-02","event":"Treasury Grant vesting commences for eligible affected users.","source":"KyberSwap Blog","source_url":"https://blog.kyberswap.com/kyberswap-elastic-exploit-treasury-grant-program-registration/","date_original":"2024-02-01"},{"date":"2024-09","event":"Andean Medjedovic arrested in Belgrade, Serbia.","source":"CBC News","source_url":"https://www.cbc.ca/news/world/canadian-alleged-cryptocurrency-hack-9.7066147","date_original":"2024-09-01"},{"date":"2024-11","event":"Medjedovic released by Serbian authorities after 105 days. The High Court of Belgrade rules Dutch prosecutors failed to sufficiently establish his identity as perpetrator and that the equivalent domestic offense carried insufficient sentencing to justify extradition.","source":"CBC News","source_url":"https://www.cbc.ca/news/world/canadian-alleged-cryptocurrency-hack-9.7066147","date_original":"2024-11-01"},{"date":"2025-02-03","event":"U.S. Department of Justice unseals five-count criminal indictment against Andean Medjedovic in the Eastern District of New York, charging him with wire fraud, computer damage, attempted extortion, and money laundering conspiracy related to KyberSwap and the 2021 Indexed Finance exploit.","source":"U.S. Department of Justice","source_url":"https://www.justice.gov/opa/pr/canadian-man-charged-65m-cryptocurrency-hacking-schemes"},{"date":"2026-01-30","event":"Reports indicate Medjedovic has surfaced in Bosnia after slipping Serbian authorities. U.S. DOJ confirms he remains at large.","source":"Balkan Insight","source_url":"https://balkaninsight.com/2026/01/30/canadian-crypto-fugitive-slips-dragnet-in-serbia-surfaces-in-bosnia/bi/"},{"date":"2026-03-24","event":"Reports emerge that Medjedovic has engaged a U.S. lobbying firm for approximately $300,000 to seek a presidential pardon from the Trump administration.","source":"Balkan Insight","source_url":"https://balkaninsight.com/2026/03/24/fugitive-canadian-hacker-released-by-serbia-seeks-pardon-from-trump/bi/"}],"sources_used":[{"url":"https://blog.kyberswap.com/post-mortem-kyberswap-elastic-exploit/","name":"Post Mortem: KyberSwap Elastic Exploit November 2023 — KyberSwap Blog","type":"official","archive_url":"http://web.archive.org/web/20260412060634/https://blog.kyberswap.com/post-mortem-kyberswap-elastic-exploit/","credibility":1,"archive_timestamp":"2026-04-12T06:06:34+00:00"},{"url":"https://www.justice.gov/opa/pr/canadian-man-charged-65m-cryptocurrency-hacking-schemes","name":"Canadian Man Charged in $65M Cryptocurrency Hacking Schemes — U.S. Department of Justice","type":"regulatory","archive_url":"http://web.archive.org/web/20260712093555/https://www.justice.gov/opa/pr/canadian-man-charged-65m-cryptocurrency-hacking-schemes","credibility":1,"archive_timestamp":"2026-07-12T09:35:55+00:00"},{"url":"https://www.coindesk.com/tech/2023/11/23/kyberswap-dex-hacked-for-48-million-attacker-teases-negotiations","name":"KyberSwap DEX Hacked for $48 Million, Attacker Teases Negotiations — CoinDesk","type":"news_article","archive_url":"http://web.archive.org/web/20251129190352/https://www.coindesk.com/tech/2023/11/23/kyberswap-dex-hacked-for-48-million-attacker-teases-negotiations","credibility":1,"archive_timestamp":"2025-11-29T19:03:52+00:00"},{"url":"https://www.coindesk.com/policy/2025/02/03/u-s-prosecutors-charge-canadian-man-with-usd65m-hacks-of-indexed-finance-kyberswap","name":"U.S. Prosecutors Charge Canadian Man With $65M Hacks of Indexed Finance, KyberSwap — CoinDesk","type":"news_article","archive_url":"http://web.archive.org/web/20260725154919/https://www.coindesk.com/policy/2025/02/03/u-s-prosecutors-charge-canadian-man-with-usd65m-hacks-of-indexed-finance-kyberswap","credibility":1,"archive_timestamp":"2026-07-25T15:49:19+00:00"},{"url":"https://decrypt.co/208147/kyberswap-hacker-demands-company-control-unhinged-on-chain-ransom-letter","name":"KyberSwap Hacker Demands Company Control in Unhinged On-Chain Ransom Letter — Decrypt","type":"news_article","archive_url":"http://web.archive.org/web/20260510025649/https://decrypt.co/208147/kyberswap-hacker-demands-company-control-unhinged-on-chain-ransom-letter","credibility":2,"archive_timestamp":"2026-05-10T02:56:49+00:00"},{"url":"https://www.theblock.co/post/265429/kyber-hacker-control-message","name":"KyberSwap hacker demands full control in bizarre on-chain message — The Block","type":"news_article","archive_url":null,"credibility":2,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://hacken.io/insights/kyberswap-hack-explained/","name":"KyberSwap's $47M Reentrancy Attack: A Deep Dive — Hacken","type":"research","archive_url":"http://web.archive.org/web/20260420193138/https://hacken.io/insights/kyberswap-hack-explained/","credibility":2,"archive_timestamp":"2026-04-20T19:31:38+00:00"},{"url":"https://www.halborn.com/blog/post/explained-the-kyberswap-hack-november-2023","name":"Explained: The KyberSwap Hack (November 2023) — Halborn","type":"research","archive_url":"http://web.archive.org/web/20260525194207/https://www.halborn.com/blog/post/explained-the-kyberswap-hack-november-2023","credibility":2,"archive_timestamp":"2026-05-25T19:42:07+00:00"},{"url":"https://blocksec.com/blog/yet-another-tragedy-of-precision-loss-an-in-depth-analysis-of-the-kyber-swap-incident-1","name":"Yet Another Tragedy of Precision Loss — BlockSec","type":"research","archive_url":"http://web.archive.org/web/20260606075636/https://blocksec.com/blog/yet-another-tragedy-of-precision-loss-an-in-depth-analysis-of-the-kyber-swap-incident-1","credibility":2,"archive_timestamp":"2026-06-06T07:56:36+00:00"},{"url":"https://blog.kyberswap.com/kyberswap-treasury-grant-program/","name":"KyberSwap Treasury Grant Program — KyberSwap Blog","type":"official","archive_url":"http://web.archive.org/web/20260310124158/https://blog.kyberswap.com/kyberswap-treasury-grant-program/","credibility":1,"archive_timestamp":"2026-03-10T12:41:58+00:00"},{"url":"https://blog.kyberswap.com/kyberswap-elastic-exploit-treasury-grant-program-registration/","name":"Treasury Grant Program Registration — KyberSwap Blog","type":"official","archive_url":"http://web.archive.org/web/20260209053518/https://blog.kyberswap.com/kyberswap-elastic-exploit-treasury-grant-program-registration/","credibility":1,"archive_timestamp":"2026-02-09T05:35:18+00:00"},{"url":"https://crypto.news/kyberswap-laid-off-50-of-workforce-after-54m-elastic-exploit/","name":"KyberSwap laid off 50% of workforce — crypto.news","type":"news_article","archive_url":"http://web.archive.org/web/20251015054722/https://crypto.news/kyberswap-laid-off-50-of-workforce-after-54m-elastic-exploit/","credibility":2,"archive_timestamp":"2025-10-15T05:47:22+00:00"},{"url":"https://www.cbc.ca/news/world/canadian-alleged-cryptocurrency-hack-9.7066147","name":"Fake passports, $65M US and an Interpol Red Notice — CBC News","type":"news_article","archive_url":"http://web.archive.org/web/20260206091129/https://www.cbc.ca/news/world/canadian-alleged-cryptocurrency-hack-9.7066147","credibility":1,"archive_timestamp":"2026-02-06T09:11:29+00:00"},{"url":"https://balkaninsight.com/2026/01/30/canadian-crypto-fugitive-slips-dragnet-in-serbia-surfaces-in-bosnia/bi/","name":"Canadian crypto fugitive surfaces in Bosnia — Balkan Insight","type":"news_article","archive_url":"http://web.archive.org/web/20260324202901/https://balkaninsight.com/2026/01/30/canadian-crypto-fugitive-slips-dragnet-in-serbia-surfaces-in-bosnia/bi/","credibility":2,"archive_timestamp":"2026-03-24T20:29:01+00:00"},{"url":"https://balkaninsight.com/2026/03/24/fugitive-canadian-hacker-released-by-serbia-seeks-pardon-from-trump/bi/","name":"Fugitive Canadian Hacker Seeks Pardon from Trump — Balkan Insight","type":"news_article","archive_url":"http://web.archive.org/web/20260514092206/https://balkaninsight.com/2026/03/24/fugitive-canadian-hacker-released-by-serbia-seeks-pardon-from-trump/bi/","credibility":2,"archive_timestamp":"2026-05-14T09:22:06+00:00"},{"url":"https://www.chainsecurity.com/security-audit/kyberswap-elastic","name":"KyberSwap Elastic — ChainSecurity Security Audit","type":"research","archive_url":"http://web.archive.org/web/20260710090557/https://www.chainsecurity.com/security-audit/kyberswap-elastic","credibility":2,"archive_timestamp":"2026-07-10T09:05:57+00:00"},{"url":"https://github.com/sherlock-audit/2023-07-kyber-swap","name":"Sherlock Audit Contest 2023-07-kyber-swap — GitHub","type":"research","archive_url":null,"credibility":2,"archive_error":"error:not-found","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://www.nominis.io/insights/kyberswap-hacker-uncovered","name":"KyberSwap Hacker Uncovered: Attack Analysis — Nominis Insights","type":"on_chain","archive_url":"http://web.archive.org/web/20260516075636/https://www.nominis.io/insights/kyberswap-hacker-uncovered","credibility":2,"archive_timestamp":"2026-05-16T07:56:36+00:00"},{"url":"https://beincrypto.com/kyberswap-resumes-elastic-protocol-backed-by-kyberdao-security-fund/","name":"KyberSwap Resumes Elastic Protocol Backed By KyberDAO Security Fund — BeInCrypto","type":"news_article","archive_url":null,"credibility":2,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://docs.kyberswap.com/reference/legacy/audits","name":"Audits — KyberSwap Docs","type":"official","archive_url":"http://web.archive.org/web/20260414084238/https://docs.kyberswap.com/reference/legacy/audits","credibility":1,"archive_timestamp":"2026-04-14T08:42:38+00:00"}],"source_tags":["defillama"],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-sonnet-4-5","created_at":"2026-05-04T02:54:48.091068+00:00","updated_at":"2026-08-29T01:35:45.405+00:00"}}